CWE-313 Cleartext Storage in a File or on Disk
variantThe product stores sensitive information in cleartext in a file, or on disk.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (36)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-6538US | high8.8 | — | ||
The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for A… | ||||
| CVE-2024-20448US | high8.6OT elevated | — | ||
A vulnerability in the Cisco Nexus Dashboard Fabric Controller (NDFC) software, formerly Cisco Data Center Network Manager (DCNM), could allow an attacker with access to a backup f… | ||||
| CVE-2016-6547US | high7.8 | — | ||
The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. | ||||
| CVE-2016-6546US | high7.8 | — | ||
The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is consider… | ||||
| CVE-2025-5154US | medium4.4OT elevated | Exploit | ||
A vulnerability was identified in PhonePe App 25.03.21.0 on Android. This affects an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Data… | ||||
| CVE-2024-6785US | high7.1OT elevated | — | ||
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being a… | ||||
| CVE-2018-10622US | high7.1 | — | ||
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication. | ||||
| CVE-2023-4580US | medium6.5OT elevated | — | ||
Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117… | ||||
| CVE-2024-9040US | medium5.5OT elevated | — | ||
A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the component Password Handler. T… | ||||
| CVE-2023-4066US | medium5.5OT elevated | — | ||
A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown… | ||||
| CVE-2023-2863US | medium5.5OT elevated | — | ||
A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the… | ||||
| CVE-2023-0114US | medium5.5OT elevated | — | ||
A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the componen… | ||||
| CVE-2025-2120US | medium4.6OT elevated | — | ||
A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic. This issue affects some unknown processing of the file /tmp/hostapd.co… | ||||
| CVE-2024-5916US | medium4.4OT elevated | — | ||
An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of exter… | ||||
| CVE-2024-38280US | medium4.6OT elevated | — | ||
An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text. | ||||
| CVE-2023-35699US | medium4.6OT elevated | — | ||
Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card. | ||||
| CVE-2026-5769US | medium4.1 | — | ||
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocad… | ||||
| CVE-2026-90842US | low3.7OT elevated | — | ||
A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login_Mode… | ||||
| CVE-2019-19291US | low3.5OT elevated | — | ||
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Vi… | ||||
| CVE-2026-14663US | —OT elevated | — | ||
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL conf… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan